On a typical desktop (with no listening services such as
...) it seems to me, the browser is the most exposed application and a potential security compromise (and even more so with
Flash plugins. And judging from the constant security updates, this seems to be correct.
I am therefore wondering whether I could run
Iceweasel) as a different user, such as
nobody. Even if firefox had a critical bug, the worst that could happen to me is that files owned by
nobody would be compromised.
This seems like a graet idea. Is this actually doable? Would this have any disadvantages. Is it really a bluet-proof solution as I imagine it to be?
How would Firefox window owned by nobody access my display?
Is there perhaps a better way to make firefox more secure (i.e. jail) ?
I am using
Debian Wheezy and
LXDE Desktop environment.
I should have perhaps formulated my question more clearly, but I thought it was too obvious to need elaborating. Ofcourse, I am not running firefox as root. I am running firefox (and everything else) as user
martin. My question is concerning running firefox as another user than
martin, while being logged in X as
martin. I want to protect both
martin from being compromised.